You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Infected With Trojan.goldun

My computer is infected with something called Trojan.goldun. is there anybody who have some experience of this and how to get free from it. I have norton and spywaredoctor but they can't fix it. i get a mesage from norton that it is located in "Windows\system32\gatexkey.dll" denied permission to the file.
can anybody help me?

BC AdBot (Login to Remove)

Click here to download Hijackthis.Save HJTsetup.exe to your desktop.Double click on the HJTsetup.exe icon on your desktop.By default it will install to C:\Program Files\Hijack This.Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.Put a check by Create a desktop icon then click Next again.Continue to follow the rest of the prompts from there.At the final dialogue box click Finish and it will launch Hijack This.Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.Click Save to save the log file and then the log will open in notepad.Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.Come back here to this thread and Paste the log in your next reply.DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.

Download haxfix.exe.Save it to your desktop.Double click on haxfix.exe to install haxfix. (standard installation path is c:\program Files\haxfix)Checkmark "Create a desktop icon". Click "Next".When the installation is completed, make sure that the checkmark "Launch HaxFix" is placed.Click "Finish". A red "dos window" (dos box) will open.Select option 1. Make logfile by typing 1 and then pressing Enter.Haxfix will start scanning the computer. When it is finished a logfile will open.Copy the contents of that logfile and paste it into this thread.

Open this folder program files\haxfix and double click on fix.bat (or double click on fix.bat desktop icon)Close all other open windows since this step requires a reboot.

Select option 2. Run auto fix by typing 2, and then pressing Enter.If an infection is found, you'll get a message to close all other open windows.Close them, except the red dos window from haxfix and then press Enter.The computer will reboot.After reboot a logfile will open. Post the contents of that logfile along with a new hijackthislog.

It is a good idea to print off these instructions:This will be useful as there is a possibility some of the instructions will need to be carried out where internet access is not available. You may also like to save these instructions in word/notepad to the desktop where they can be easily found for the same reasons as above. A print out of the instructions would be a good reference to make sure you don't yet lost.Also, it is important that you complete the instructions in the right order, and also that you don't miss any steps out!If you have any queries about the process or just general questions, just ask.

Start HijackThis, close all open windows leaving only HijackThis running. Place a check against each of the following if still present:

Click on Fix Checked when finished and exit HijackThis.Make sure your Internet Explorer is closed when you click Fix Checked!

Please perform this online scan: Kaspersky WebscanRead the Requirements and Privacy statement, then select "Accept"A dialogue box will appearing asking "Do you want to install this software?" Name: kavwebscan_unicode.cabSelect "Install" to download the ActiveX controls that allows ActiveScan to run.When the download is complete it will say ready, click "Next"Select a target to scan: Click on "My Computer"When the scan is complete choose to save the results as "Save as Text"Post the Kaspersky scan results in your next reply, along with a new Hijackthis log.

When i have selected those four files and click on fix Checked there comes a message (This will permanently delate or repair what you selected) have I done something wrong here or should I just continue.

Ok, go ahead and delete this folder --> C:\Program\ZipCodecIf you have any problems doing so please let me know.

Please download SmitfraudFix (by S!Ri)Open the file and it will extract the contents (a folder named SmitfraudFix) to your Desktop.Open the SmitfraudFix folder and double-click smitfraudfix.cmdSelect option #1 - Search by typing 1, and press Enter. Please copy/paste the content of that report into your next reply.